CVE-2022-38653 In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded

Description

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

Affected products and versions

Product	Affected versions	Fixed in
HCL Digital Experience	Versions not published

Other CVEs of HCL Digital Experience

The 4 CVEs of HCL Digital Experience →

CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to… 5.9 Medium CVE-2022-38662  In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites 6.1 Medium CVE-2021-27774 User input included in error response, which could be used in a phishing attack 3.1 Low